CVE-2015-2673: Wpeasycart Wp Easycart

High severity, CVSS 8.8. EPSS: 18.9% chance of exploitation in the next 30 days.

The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters.

Affected products

• Wpeasycart Wp Easycart: version 1.1.30 only; version 1.1.31 only; version 1.1.32 only; version 1.1.33 only; version 1.1.34 only; version 1.1.35 only; …

Published 2017-10-06. Last modified 2026-06-17.